Rosario Piro wrote:
>>If you do not have the VO from the grid-jobmap file, you should determine
>>it from a configuration file that maps each account to its VO.
>
>
> We have such a mapping as well (FQAN takes always the precedence,
> the second choice are the pool accounts if they are configured to be used,
> the last choice is the mapping from local user and/or group accounts to
> VOs).
>
> The "problem" with such a mapping is that it has always to be kept
> up-to-date otherwise you loose valuable information, while having a
> naming convention for pool accounts might in some cases be preferable.
> (If the site admin knows that his pool accounts respect that naming
> convention, then you can avoid mapping accounts to VOs).
There are VOs with long names that may not easily be discovered from
the names of their pool accounts. For example, the "diligent" VO may
have accounts like "dlg001". Sites will not agree on account names,
but it is easy for an admin to maintain a mapping file: it can e.g. be
generated automatically by YAIM.
|